Facebook Marketplace Scam Buyers: How Fake Buyers Trick Sellers
Written by: Thomas Orsolya
Published on:
Facebook Marketplace is one of the easiest places to sell used items locally, but it also attracts scammers posing as buyers. These scams often look simple at first: someone is interested, wants to pay fast, and seems ready to pick up the item.
The problem is that many fake buyers are not trying to buy anything. They are trying to steal money, personal information, account access, or the item itself.
Scam Overview
Facebook Marketplace buyer scams usually begin with a message from someone who seems eager to purchase your item. They may respond within minutes of your listing going live, offer the full asking price, avoid asking normal questions, and push the conversation toward payment or pickup very quickly.
At first, this can feel like an easy sale. The buyer may say they are busy, out of town, buying the item for a family member, or sending someone else to collect it. They may also claim they can pay immediately through PayPal, Zelle, Venmo, Cash App, bank transfer, or another payment app.
That is where the scam begins.
Instead of completing a normal transaction, the fake buyer creates a situation where you are pressured to trust a fake payment, reveal your email address or phone number, send back “extra” money, click a link, pay a fake fee, or share a verification code.
These scams work because they target sellers who are trying to move quickly. The scammer acts like a serious buyer and creates urgency. They may say another person will pick up the item soon, that payment has already been sent, or that you must complete one extra step before receiving the money.
In reality, the money is fake, delayed, reversible, or never sent at all.
Why Sellers Are Targeted on Facebook Marketplace
Most people think online marketplace scams target buyers. That is true, but sellers are also common targets.
Scammers know that sellers often want three things:
A fast sale
A simple pickup
Guaranteed payment
Fake buyers exploit exactly those expectations. They pretend to be cooperative, flexible, and ready to pay. Instead of bargaining, they may offer the full price immediately. Some even offer more than the asking price to make the deal feel too good to ignore.
Many sellers also assume they are safe because they are the ones receiving money. That is the trap. In several Facebook Marketplace buyer scams, the seller ends up losing money even though they never intended to buy anything.
The scam may involve a fake payment email, a fake overpayment, a fake courier pickup, or a code that helps the scammer take over another account.
Common Facebook Marketplace Buyer Scams
1. The Overpayment Trick
The overpayment scam is one of the oldest tricks used against online sellers.
A fake buyer agrees to buy your item and claims to send payment. Then they say they accidentally sent too much money. For example, if you listed a sofa for $300, they may claim they sent $600 by mistake.
They ask you to refund the extra amount.
The scammer may say something like:
“I accidentally sent too much. Can you send back the difference?”
Or:
“My assistant made the payment and included the mover’s fee by mistake.”
The payment may appear to come through as a check, fake app notification, fake PayPal email, or pending bank transfer. In some cases, the scammer sends an image or screenshot that looks like proof of payment.
The seller then sends back the “extra” money.
Later, the original payment fails, bounces, gets reversed, or turns out to have never existed. The scammer keeps the refund, and the seller is left with the loss.
The key warning sign is simple: a real buyer does not need you to refund extra money before the payment fully clears.
2. Fake Payment Notifications
Another common Facebook Marketplace buyer scam involves fake payment emails.
The buyer asks for your email address, claiming they need it to pay through PayPal, Zelle, Venmo, Cash App, or another service. After you provide it, you receive an email that appears to be from the payment platform.
The email may say that money has been sent, but there is a problem.
Common fake messages include:
“Your payment is pending.”
“You need to upgrade to a business account.”
“The buyer must send extra funds to release your payment.”
“You must refund the buyer before the funds are available.”
“A small fee is required to activate your account.”
“Your account has exceeded the receiving limit.”
This is not how normal peer-to-peer payments work.
The email is fake. It is designed to make you believe that money is waiting, but you must take action first. The scammer may then pressure you to pay a fee, send a refund, or continue communicating outside Facebook.
A real payment should appear inside your actual payment account or banking app. An email alone is not proof that money was sent.
3. The “Business Account Upgrade” Scam
This scam is especially common with fake PayPal or Zelle payment messages.
The fake buyer claims they sent the money, but you receive an email saying your account cannot accept the payment because it is not a business account. The email may claim the buyer must send an additional amount to “expand” or “upgrade” your account.
Then the scammer tells you they already sent the extra money and asks you to reimburse them.
For example:
“I sent you $300, but PayPal says your account needs to be upgraded. I had to send an extra $200. Please refund the $200 so the full payment can be released.”
This is a scam.
There is no legitimate reason for a buyer to send extra money to upgrade your account and then demand repayment. The entire situation is invented to make you send real money while waiting for a fake payment that will never arrive.
4. The Phone Verification Code Scam
In this scam, the fake buyer asks for your phone number.
They may say they want to confirm you are a real person before buying. Then they tell you they are sending a code and ask you to read it back to them.
This code is not for verifying your identity as a seller.
The scammer is usually trying to use your phone number to create or access an account, such as Google Voice, email, social media, or another online service. When you give them the code, you may help them take control of an account or attach your phone number to something they control.
Typical messages include:
“I’ve been scammed before. Can I send you a code to prove you’re real?”
“Facebook requires verification before I can pay.”
“Send me the 6-digit code so I know this is not fake.”
“I need to verify your phone number before pickup.”
Never share a verification code with someone from Facebook Marketplace.
A real buyer does not need a code from your phone to purchase a used item.
5. The “Courier,” “Mover,” or Family Member Pickup Scam
This scam usually starts with a buyer who says they cannot pick up the item personally.
They may claim they are:
Out of town
At work
Buying for a relative
Sending a son, nephew, brother, or friend
Sending a courier, mover, or delivery company
This is not always a scam by itself. Sometimes a real buyer may send someone else. The danger appears when the buyer combines this story with fake digital payment, overpayment, or pressure to release the item before payment clears.
The scammer may say:
“My cousin will pick it up after I send payment.”
Or:
“I will send a courier, but I need your address and email first.”
Or:
“The mover will come today. I already paid you, check your email.”
The goal is to make the transaction feel urgent and complicated. You may be asked to hand over the item to a third party, send money to the “courier,” or trust a fake payment confirmation.
A safe rule is simple: do not release the item until you have confirmed the money inside your actual account, not through an email screenshot or promise.
6. Fake Shipping or Pickup Fee Scam
Some scammers pretend to arrange a courier pickup and claim there is a small fee that must be paid before the courier can come.
They may say the buyer already paid for the item, but the seller must pay insurance, handling, pickup confirmation, or a refundable courier fee.
Common fake fees include:
Insurance fee
Pickup fee
Delivery confirmation fee
Account activation fee
Refundable security deposit
Courier verification fee
The scammer may send a fake email from a supposed courier company. The email may look official and include logos, tracking numbers, or payment instructions.
The goal is to make you pay a fee for a delivery service that does not exist.
Real buyers do not require sellers to pay random courier fees through gift cards, payment apps, crypto, or wire transfers.
7. Fake Check Scam
A fake buyer may offer to pay by check, cashier’s check, certified check, or company check.
They may send the check by mail or email a digital image of it. The check may appear to deposit successfully at first, but that does not mean it has cleared.
Banks can make funds temporarily available before the check is fully verified. Days or weeks later, the check can bounce or be identified as fraudulent. When that happens, the bank removes the funds from your account.
The scammer may combine this with overpayment.
For example, they send a fake check for more than the item price and ask you to send the extra money to a mover or back to them. Once the check fails, you lose whatever money you sent.
For Facebook Marketplace sales, checks are high risk. Cash in person or verified instant payment is much safer.
How Fake Buyers Usually Approach Sellers
Most scam buyers follow a predictable pattern. Their messages often feel generic, rushed, or oddly formal.
A fake buyer may ask:
“Is this item still available?”
Then, almost immediately:
“I want it. I will pay now.”
They may avoid normal buyer questions about condition, size, location, defects, or price. They may not care about seeing the item first. They may not negotiate. They may not even mention the item by name.
That is a red flag.
Real buyers usually ask practical questions. Fake buyers often focus on payment, email addresses, phone numbers, courier pickup, or sending someone else.
Warning Signs of a Facebook Marketplace Buyer Scam
Be cautious if a buyer:
Offers to pay more than the asking price
Says they accidentally overpaid
Asks for your email address to send payment
Sends a payment email that does not appear in your actual account
Claims you need to upgrade to a business account
Asks you to pay a fee before receiving money
Wants a verification code sent to your phone
Refuses to meet in person for a local item
Says a courier or family member will pick up the item
Pressures you to act quickly
Sends screenshots instead of real payment
Wants to move the conversation away from Facebook
Uses strange grammar or copy-pasted messages
Avoids answering direct questions
Wants the item released before payment clears
One warning sign does not always prove a scam, but several together should be treated seriously.
Example of a Fake Buyer Conversation
A typical scam may look like this:
Buyer: “Hi, is this still available?”
Seller: “Yes.”
Buyer: “Great. I want to buy it today. I’m out of town, but my cousin can pick it up.”
Seller: “Okay, cash on pickup is fine.”
Buyer: “I can pay now through PayPal. Send me your email.”
Seller: “I sent it.”
Buyer: “Payment sent. Check your email.”
The seller then receives a fake email saying the payment is pending and that the seller must upgrade to a business account. The buyer then claims they sent extra money and asks the seller to refund the difference.
This is the moment the seller should stop.
The payment is fake. The email is fake. The buyer’s urgency is part of the scam.
Why Fake Payment Emails Look Convincing
Scammers know that many people trust familiar names like PayPal, Zelle, Venmo, Cash App, Facebook, or courier companies. That is why fake emails often copy logos, colors, formatting, and official-sounding language.
Some fake emails include:
Transaction IDs
Payment reference numbers
Buyer names
Fake support addresses
Urgent warnings
Threats of account suspension
Instructions to send money
But a professional-looking email does not prove anything.
The only reliable way to verify payment is to log in directly to your payment account or banking app. Do not click links in the email. Open the app or website yourself and check whether the funds are actually there.
If the payment does not appear in your real account, you have not been paid.
How to Sell Safely on Facebook Marketplace
Meet in Person When Possible
For local sales, the safest option is usually an in-person exchange in a public place.
Good meeting locations include:
Police station safe exchange zones
Busy shopping center parking lots
Public lobbies
Well-lit areas with cameras
Bank branches if large cash is involved
Avoid isolated places, especially for expensive items.
Prefer Cash for Local Sales
Cash is simple and final when handled carefully. For local Facebook Marketplace sales, many sellers prefer cash because it avoids fake payment emails, reversals, app disputes, and pending transfer scams.
For higher-value items, consider meeting at a bank so the cash can be checked or deposited immediately.
Confirm Digital Payments Inside the App
If you accept a digital payment, check your actual account before releasing the item.
Do not rely on:
Screenshots
Emails
Text messages
“Pending” notices
Buyer promises
Fake support messages
Open the payment app yourself. Confirm the money is received and available.
Never Refund an Overpayment
If someone sends too much money, treat it as suspicious.
Do not send money back through another method. Do not pay a courier. Do not refund extra funds before the original payment is fully cleared and verified.
The safest response is to cancel the transaction and tell the buyer to send the correct amount through a secure method.
Never Share Verification Codes
No Marketplace buyer needs your verification code.
Never share codes from:
Google
Facebook
WhatsApp
PayPal
Zelle
Venmo
Cash App
Your bank
Your email provider
Any social media account
A verification code is for you only. Anyone asking for it is likely trying to access or create an account using your information.
Keep Communication on Facebook
Scammers often try to move the conversation to text, WhatsApp, email, or another app.
Keeping the conversation on Facebook makes it easier to review messages, report the account, and avoid giving away extra personal information.
You do not need to provide your email or phone number just because someone claims they want to pay.
What to Do If You Think a Buyer Is a Scammer
If a Facebook Marketplace buyer seems suspicious, stop the conversation immediately. Do not send money, share codes, provide sensitive details, or release the item until everything is verified.
Immediate Steps to Take
Do not click any links the buyer sent.
Do not ship the item.
Do not hand over the item to a courier, friend, or family member.
Do not refund any “extra” payment.
Do not pay any courier, insurance, verification, or account upgrade fee.
Check your payment account directly by opening the official app or website.
Do not rely on screenshots, emails, or text messages as proof of payment.
Secure the Evidence
Before blocking the buyer, save anything that may help later.
Take screenshots of the full conversation.
Save the buyer’s profile name and profile link if possible.
Save phone numbers, email addresses, payment usernames, and links they used.
Keep copies of fake payment emails or courier messages.
Write down the date, time, item name, and amount involved.
Report and Block the Buyer
Once you have saved the evidence:
Report the buyer’s profile to Facebook.
Report the Marketplace conversation if possible.
Block the buyer.
Do not continue arguing with them.
Do not let them pressure you into completing the transaction.
If You Shared Sensitive Information
Act quickly if you gave the buyer any personal or account-related details.
Change passwords for affected accounts.
Turn on two-factor authentication.
Contact your bank or payment provider if payment information was shared.
Watch for suspicious login attempts, new recovery emails, or unknown devices.
Report unauthorized activity to the affected platform.
What to Do If You Shared a Verification Code
If you gave a scammer a verification code, move fast. That code may have been used to access an account, create a new account using your phone number, or connect your number to a service controlled by the scammer.
Check the Account Connected to the Code
Start with the service that sent the code.
For example:
If the code came from Google, check your Google account and Google Voice settings.
If the code came from Facebook, check your login sessions, phone number, email address, and security settings.
If the code came from WhatsApp, check whether your account is still active on your phone.
If the code came from your bank or payment app, contact support immediately.
Lock Down Your Accounts
Take these steps as soon as possible:
Change your password.
Turn on two-factor authentication.
Remove unknown devices.
Remove unknown recovery emails.
Remove unknown recovery phone numbers.
Check recent login activity.
Review connected apps and permissions.
Check email forwarding rules.
Report unauthorized access to the platform.
If Your Phone Number Was Used for Google Voice
One common version of this scam involves Google Voice. The scammer uses your phone number to claim a Google Voice number, then asks you for the verification code.
If this happened:
Go to Google Voice recovery options.
Try to reclaim your phone number.
Remove your number from any account you do not recognize.
Secure your Google account with a new password and two-factor authentication.
What to Do If You Sent Money to a Fake Buyer
If you sent money to a fake buyer, contact the payment provider immediately. The faster you act, the better your chances of limiting the damage.
Contact the Payment Service
Depending on how you paid, contact:
Your bank
Your credit card company
PayPal
Zelle
Venmo
Cash App
Your wire transfer provider
The gift card company
The cryptocurrency exchange you used
Explain that you were targeted in a marketplace scam and provide all available evidence.
Understand the Recovery Risk
Some payment methods are harder to reverse than others.
High-risk payment methods include:
Friends-and-family transfers
Bank wires
Gift cards
Cryptocurrency
Instant payment apps
Cash deposits
Payments sent to unknown third parties
Even if recovery is unlikely, still report the transaction. A fast report can help freeze accounts, support a fraud claim, or create a record of the scam.
Report the Scam
You should also report the scam to:
Facebook Marketplace
Your bank or payment provider
Local law enforcement, if the loss is significant
Your country’s consumer protection or cybercrime reporting agency
Include as much detail as possible:
Screenshots
Buyer profile details
Phone numbers
Email addresses
Payment usernames
Transaction IDs
Fake payment emails
Fake courier messages
The full message history
How to Respond to a Suspicious Buyer
You do not need to argue with a suspicious buyer. Keep your response short, firm, and final.
Use a Clear Boundary
You can say:
I only accept cash at pickup. I do not accept overpayments, verification codes, courier payments, or account upgrade requests.
Or:
I will only release the item after payment is confirmed inside my actual account. Screenshots and emails are not accepted.
Or:
I do not share phone verification codes. I’m canceling this transaction.
Do Not Continue the Conversation
If the buyer keeps pushing:
Do not explain further.
Do not click their links.
Do not send screenshots of your account.
Do not give your email or phone number.
Block and report them.
A legitimate buyer will accept basic safety rules. A scammer will try to pressure you around them.
Safe Selling Checklist
Before completing a Facebook Marketplace sale, review this checklist.
Buyer Behavior
Ask yourself:
Has the buyer asked normal questions about the item?
Are they willing to meet in a safe public place?
Are they pushing to complete the deal too quickly?
Are they using generic messages that do not mention the item?
Are they avoiding direct answers?
Payment Safety
Check the payment situation carefully.
Is the money visible inside your actual payment account?
Are they relying only on screenshots or emails?
Are they claiming the payment is “pending”?
Are they asking you to refund extra money?
Are they asking you to pay a fee?
Are they saying you need to upgrade to a business account?
Personal Information Risks
Be careful if the buyer asks for:
Your email address
Your phone number
A verification code
Your home address too early
Banking details
Login information
Payment app screenshots
Pickup Red Flags
Watch out if the buyer says:
A courier will collect the item.
A mover will pick it up.
A son, nephew, friend, or assistant will come instead.
They are out of town but want to pay immediately.
You must hand over the item before the money fully clears.
Final Rule
If the deal feels rushed, confusing, or unnecessarily complicated, stop.
A legitimate Facebook Marketplace sale should be simple: clear communication, safe pickup, and verified payment.
Is Your Device Infected? Scan for Malware
If your computer or phone is slow, showing unwanted pop-ups, or acting strangely, malware could be the cause. Running a scan with Malwarebytes Anti-Malware Free is one of the most reliable ways to detect and remove harmful software. The free version can identify and clean common infections such as adware, browser hijackers, trojans, and other unwanted programs.
Malwarebytes works on Windows, Mac, and Android devices. Choose your operating system below and follow the steps to scan your device and remove any malware that might be slowing it down.
Malwarebytes for WindowsMalwarebytes for MacMalwarebytes for Android
Run a Malware Scan with Malwarebytes for Windows
Malwarebytes stands out as one of the leading and widely-used anti-malware solutions for Windows, and for good reason. It effectively eradicates various types of malware that other programs often overlook, all at no cost to you. When it comes to disinfecting an infected device, Malwarebytes has consistently been a free and indispensable tool in the battle against malware. We highly recommend it for maintaining a clean and secure system.
Download Malwarebytes
Download the latest version of Malwarebytes for Windows using the official link below. Malwarebytes will scan your computer and remove adware, browser hijackers, and other malicious software for free.
(The above link will open a new page from where you can download Malwarebytes)
Install Malwarebytes
After the download is complete, locate the MBSetup file, typically found in your Downloads folder. Double-click on the MBSetup file to begin the installation of Malwarebytes on your computer. If a User Account Control pop-up appears, click “Yes” to continue the Malwarebytes installation.
Follow the On-Screen Prompts to Install Malwarebytes
When the Malwarebytes installation begins, the setup wizard will guide you through the process.
You’ll first be prompted to choose the type of computer you’re installing the program on—select either “Personal Computer” or “Work Computer” as appropriate, then click on Next.
Malwarebytes will now begin the installation process on your device.
When the Malwarebytes installation is complete, the program will automatically open to the “Welcome to Malwarebytes” screen.
On the final screen, simply click on the Open Malwarebytes option to start the program.
Enable “Rootkit scanning”.
Malwarebytes Anti-Malware will now start, and you will see the main screen as shown below. To maximize Malwarebytes’ ability to detect malware and unwanted programs, we need to enable rootkit scanning. Click on the “Settings” gear icon located on the left of the screen to access the general settings section.
In the settings menu, enable the “Scan for rootkits” option by clicking the toggle switch until it turns blue.
Now that you have enabled rootkit scanning, click on the “Dashboard” button in the left pane to get back to the main screen.
Perform a Scan with Malwarebytes.
To start a scan, click the Scan button. Malwarebytes will automatically update its antivirus database and begin scanning your computer for malicious programs.
Wait for the Malwarebytes scan to complete.
Malwarebytes will now scan your computer for browser hijackers and other malicious programs. This process can take a few minutes, so we suggest you do something else and periodically check the status of the scan to see when it is finished.
Quarantine detected malware
Once the Malwarebytes scan is complete, it will display a list of detected malware, adware, and potentially unwanted programs. To effectively remove these threats, click the “Quarantine” button.
Malwarebytes will now delete all of the files and registry keys and add them to the program’s quarantine.
Restart your computer.
When removing files, Malwarebytes may require a reboot to fully eliminate some threats. If you see a message indicating that a reboot is needed, please allow it. Once your computer has restarted and you are logged back in, you can continue with the remaining steps.
Once the scan completes, remove all detected threats. Your Windows computer should now be clean and running smoothly again, free of trojans, adware, and other malware.
If your current antivirus allowed this malicious program on your computer, you may want to consider purchasing Malwarebytes Premium to protect against these types of threats in the future. If you are still having problems with your computer after completing these instructions, then please follow one of the steps:
Malwarebytes for Mac is an on-demand scanner that can destroy many types of malware that other software tends to miss without costing you absolutely anything. When it comes to cleaning up an infected device, Malwarebytes has always been free, and we recommend it as an essential tool in the fight against malware.
Download Malwarebytes for Mac.
You can download Malwarebytes for Mac by clicking the link below.
When Malwarebytes has finished downloading, double-click on the setup file to install Malwarebytes on your computer. In most cases, downloaded files are saved to the Downloads folder.
Follow the on-screen prompts to install Malwarebytes.
When the Malwarebytes installation begins, you will see the Malwarebytes for Mac Installer which will guide you through the installation process. Click “Continue“, then keep following the prompts to continue with the installation process.
When your Malwarebytes installation completes, the program opens to the Welcome to Malwarebytes screen. Click the “Get started” button.
Select “Personal Computer” or “Work Computer”.
The Malwarebytes Welcome screen will first ask you what type of computer are you installing this program, click either Personal Computer or Work Computer.
Click on “Scan”.
To scan your computer with Malwarebytes, click on the “Scan” button. Malwarebytes for Mac will automatically update the antivirus database and start scanning your computer for malware.
Wait for the Malwarebytes scan to complete.
Malwarebytes will scan your computer for adware, browser hijackers, and other malicious programs. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Quarantine”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes has detected. To remove the malware that Malwarebytes has found, click on the “Quarantine” button.
Restart computer.
Malwarebytes will now remove all the malicious files that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your computer.
After scanning, delete any detected threats. Your Mac should now be free from adware, unwanted extensions, and other potentially harmful software.
If your current antivirus allowed a malicious program on your computer, you might want to consider purchasing the full-featured version of Malwarebytes Anti-Malware to protect against these types of threats in the future. If you are still experiencing problems while trying to remove a malicious program from your computer, please ask for help in our Mac Malware Removal Help & Support forum.
Run a Malware Scan with Malwarebytes for Android
Malwarebytes for Android automatically detects and removes dangerous threats like malware and ransomware so you don’t have to worry about your most-used device being compromised. Aggressive detection of adware and potentially unwanted programs keeps your Android phone or tablet running smooth.
Download Malwarebytes for Android.
You can download Malwarebytes for Android by clicking the link below.
In the Google Play Store, tap “Install” to install Malwarebytes for Android on your device.
When the installation process has finished, tap “Open” to begin using Malwarebytes for Android. You can also open Malwarebytes by tapping on its icon in your phone menu or home screen.
Follow the on-screen prompts to complete the setup process
When Malwarebytes will open, you will see the Malwarebytes Setup Wizard which will guide you through a series of permissions and other setup options. This is the first of two screens that explain the difference between the Premium and Free versions. Swipe this screen to continue. Tap on “Got it” to proceed to the next step. Malwarebytes for Android will now ask for a set of permissions that are required to scan your device and protect it from malware. Tap on “Give permission” to continue. Tap on “Allow” to permit Malwarebytes to access the files on your phone.
Update database and run a scan with Malwarebytes for Android
You will now be prompted to update the Malwarebytes database and run a full system scan.
Click on “Update database” to update the Malwarebytes for Android definitions to the latest version, then click on “Run full scan” to perform a system scan.
Wait for the Malwarebytes scan to complete.
Malwarebytes will now start scanning your phone for adware and other malicious apps. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Remove Selected”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes for Android has detected. To remove the malicious apps that Malwarebytes has found, tap on the “Remove Selected” button.
Restart your phone.
Malwarebytes for Android will now remove all the malicious apps that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your device.
When the scan is finished, remove all detected threats. Your Android phone should now be free of malicious apps, adware, and unwanted browser redirects.
If your current antivirus allowed a malicious app on your phone, you may want to consider purchasing the full-featured version of Malwarebytes to protect against these types of threats in the future. If you are still having problems with your phone after completing these instructions, then please follow one of the steps:
Restore your phone to factory settings by going to Settings > General management > Reset > Factory data reset.
After cleaning your device, it’s important to protect it from future infections and annoying pop-ups. We recommend installing an ad blocker such as AdGuard. AdGuard blocks malicious ads, prevents phishing attempts, and stops dangerous redirects, helping you stay safe while browsing online.
Final Thoughts
Facebook Marketplace buyer scams are designed to make sellers feel like they are about to complete an easy sale. The fake buyer seems eager, sends payment quickly, and creates a reason why you must trust them before the money is truly confirmed.
The safest approach is to slow everything down.
Do not refund overpayments. Do not trust fake payment emails. Do not share verification codes. Do not hand over items before confirming payment. Be especially careful with buyers who claim they are sending a courier, mover, relative, or friend to collect the item.
A real buyer can follow basic safety rules. A scammer will usually pressure you to ignore them.
10 Rules to Avoid Online Scams
Here are 10 practical safety rules to help you avoid malware, online shopping scams, crypto scams, and other online fraud. Each tip includes a quick “if you already got hit” action.
Stop and verify before you click, log in, download, or pay.
Most scams win by creating urgency. Verify using a trusted method: type the website address yourself, use the official app, or call a known number (not the one in the message).
If you already clicked: close the page, do not enter passwords, and run a malware scan.
Keep your operating system, browser, and apps updated.
Updates patch security holes used by malware and malicious ads. Turn on automatic updates where possible.
If you saw a scary “update now” pop-up: close it and update only through your device settings or the official app store.
Use layered protection: antivirus plus an ad blocker.
Antivirus helps block malware. An ad blocker reduces scam redirects, phishing pages, and malvertising.
If your browser is acting weird: remove unknown extensions, reset the browser, then run a full scan.
Install apps, software, and extensions only from official sources.
Avoid cracked software, “keygens,” and random downloads. During installs, choose Custom/Advanced and decline bundled offers you do not recognize.
If you already installed something suspicious: uninstall it, restart, and scan again.
Treat links and attachments as untrusted by default.
Phishing often impersonates delivery services, banks, and popular brands. If it is unexpected, do not open attachments or log in through the message.
If you entered credentials: change the password immediately and enable 2FA.
Shop safely: research the store, then pay with protection.
Be cautious with brand-new stores, “closing sale” stories, and prices that make no sense. Prefer credit cards or PayPal for dispute options. Avoid wire transfers, gift cards, and crypto payments.
If you already paid: contact your card issuer or PayPal quickly to dispute the transaction.
Crypto rule: never pay a “fee” to withdraw or recover money.
Common patterns include fake profits, then “tax,” “gas,” or “verification” fees. Another is a “recovery agent” who demands upfront crypto.
If you already sent crypto: stop paying, save evidence (wallet addresses, TXIDs, chats), and report the scam to the platform used.
Secure your accounts with unique passwords and 2FA (start with email).
Use a password manager and unique passwords for every account. Enable 2FA using an authenticator app when possible.
If you suspect an account takeover: change passwords, sign out of all devices, and review recent logins and recovery settings.
Back up important files and keep one backup offline.
Backups protect you from ransomware and device failure. Keep at least one backup on an external drive that is not always connected.
If you suspect infection: do not connect backup drives until the system is clean.
If you think you are a victim: stop losses, document evidence, and escalate fast.
Move quickly. Speed matters for disputes, account recovery, and limiting damage.
Stop payments and contact: do not send more money or respond to the scammer.
Call your bank or card issuer: block transactions, replace the card if needed, and start a dispute or chargeback.
Secure your email first: change the email password, enable 2FA, and remove unfamiliar recovery options.
Secure other accounts: change passwords, enable 2FA, and log out of all sessions.
Scan your device: remove suspicious apps or extensions, then run a full malware scan.
Save evidence: screenshots, emails, order pages, tracking pages, wallet addresses, TXIDs, and chat logs.
Report it: to the payment provider, marketplace, social platform, exchange, or wallet service involved.
These rules are intentionally simple. Most online losses happen when decisions are rushed. Slow down, verify independently, and use payment methods and account controls that give you recourse.
Thomas is an expert at uncovering scams and providing in-depth reporting on cyber threats and online fraud. As an editor, he is dedicated to keeping readers informed on the latest developments in cybersecurity and tech.
